library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-toolset | May 4, 2022 | Aug 7, 2021 |
| Alpine Linux | — | Upgrade rust | Mar 26, 2024 | Aug 7, 2021 |
| Centos_linux | — | Upgrade rust-debuginfoUpgrade rls-debuginfoUpgrade rust-analysisUpgrade cargo-docUpgrade rust-lldbUpgrade rust-srcUpgrade rustfmt-debuginfoUpgrade rust-debugsourceUpgrade rustfmtUpgrade rust-gdbUpgrade rust-debugger-commonUpgrade clippyUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rustUpgrade cargoUpgrade rust-toolsetUpgrade rlsUpgrade rust-docUpgrade clippy-debuginfo | Nov 10, 2021 | Aug 7, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Aug 7, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Aug 7, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Aug 7, 2021 |
| Oracle_linux | — | Upgrade rust-gdbUpgrade rust-toolsetUpgrade rustfmtUpgrade rust-docUpgrade rust-srcUpgrade rust-lldbUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-analysisUpgrade cargoUpgrade cargo-docUpgrade rlsUpgrade rustUpgrade clippyUpgrade rust-debugger-commonUpgrade rust-std-static | Nov 17, 2021 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade rust-srcUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-gdbUpgrade cargo-debuginfoUpgrade rls-debuginfoUpgrade clippy-debuginfoUpgrade rlsUpgrade rust-toolsetUpgrade rust-docUpgrade clippyUpgrade rust-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-analysisUpgrade cargo-docUpgrade rustfmtUpgrade rust-debugsourceUpgrade rust-debugger-commonUpgrade rustUpgrade cargoUpgrade rust-lldbUpgrade rust-std-static | Nov 10, 2021 | Aug 7, 2021 |
| Rocky_linux | — | Upgrade cargoUpgrade rustfmt-debuginfoUpgrade rust-analysisUpgrade rust-docUpgrade rlsUpgrade clippyUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade rustUpgrade clippy-debuginfoUpgrade cargo-debuginfoUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rustfmtUpgrade rust-debuginfoUpgrade rust-toolsetUpgrade rls-debuginfo | Mar 12, 2024 | Aug 7, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Aug 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub